Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

"Someone just used your password..."


  • Please log in to reply
4 replies to this topic

#1 pjh42

pjh42

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:04:37 AM

Posted 08 December 2016 - 08:27 PM

A couple of my Google accounts have gotten the following message:

------------------------------------------------------------------        
Hi [username],

Someone just used your password to try to sign in to your Google Account
[username]@gmail.com, using an application such as an email client or
mobile device.

Details:
Wednesday, November 30, 2016 8:32 PM (Central Standard Time) Illinois, USA*

Google stopped this sign-in attempt, but you should review your recently
used devices:


-----------------------------------------------------------------------

What does this really mean?

How could that person/entity get my passwords? IOW is there some basic
security practice I'm missing? Don't they need to be able to access to
one or more of my computers/smartphones to get passwords?

Thanks.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,941 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:37 AM

Posted 08 December 2016 - 09:16 PM

Did someone login to Google with my password?
‘Suspicious sign in prevented’ email
Gmail Account Recovery and Security
Control, protect, and secure your account, all in one place
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 pjh42

pjh42
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:04:37 AM

Posted 09 December 2016 - 05:23 PM

The second of those links led to

 

https://support.google.com/accounts/answer/2506340

 

which was very helpful.

 

Still does not answer the question of how someone got passwords  to several -- but not all -- of my google accounts.

 

Thanks.


Edited by pjh42, 09 December 2016 - 05:23 PM.


#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,941 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:37 AM

Posted 09 December 2016 - 06:25 PM

Cyber-criminals rely heavily on social engineering and human interaction (the weakest link in security) to target a large audience. Spam and phishing emails are used by attackers in an attempt to trick the user into providing personal information by opening the email and clicking on links within it or opening a malicious email attachment. Attackers have been known to use exploit packs in order to craft Web pages to exploit vulnerabilities in system and outdated application software. As such, social engineering has become one of the most prolific tactics for distribution of malware, identity theft and fraud.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 pjh42

pjh42
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:04:37 AM

Posted 09 December 2016 - 06:37 PM

I'm well aware of phishing and social engineering. Some of the accounts they seem to have passwords for are one that I access only from email clients (Thunderbird and K-9). And I'm supercareful about links in emails.


Edited by pjh42, 09 December 2016 - 06:37 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users